[jsh1120]

This is a somewhat misunderstood topic. GoSharks is correct that parental controls in 6.3.1 enables password protection for digital purchases. However, even without those controls, the notion that "anyone who steals (a KF) can start making purchases without the need of a password" was never correct. Here's how it works without invoking parental controls.

() "One click" ordering for NON-DIGITAL items (e.g. real books, dvds, cds, lawn furniture, Caribbean vacations, etc.) is controlled at the Amazon account level on the web. If one click ordering is turned off at that level, no one can use the KF (or any other device) to order non-digital products without an Amazon account password.

() Even with "one click" ordering turned ON, non-digital products can only be ordered to be delivered to the address associated with your account. Trying to use the KF to order a flat screen tv to be delivered somewhere else triggers the requirement for an Amazon account password. You can order a product to be delivered to another physical address (e.g. a gift) but doing so will trigger the requirement for a password at the Amazon account level.

() However, until the latest OS update, even if you turn off "one click" ordering on the Amazon website DIGITAL content (ebook, app, mp3, etc.) can still be ordered without a password for YOUR KF. But only for that Kindle Fire. i.e. No one can order an e-book or any other DIGITAL product and download it to another device without an account password.

() The new "parental control" feature just extends the security for the DIGITAL content, preventing someone from accidentally or purposely downloading an app, an ebook, or an mp3 to your KF without a separate password (stored on the KF not necessarily the Amazon account password on the server).